Brightmail Goodlist / quarantined messages
Created: 02 Mar 2011 | 9 comments
I have added a domain name to the good list.
Messages from this domain are still being quarantined. Since the domain is in China, and the messages contain a mix of Chinese characters and English text, the messages are flagged.
Is there a way to allow messages from this domain without getting quarantined?
W Sloan
Discussion Filed Under:
Comments
Create a policy
Hi WSloan,
Usually, it takes some hours when i add e-mail address or domains to our "Good Senders", i don't know if this a Brightmail characteristic or issue, but if it is your case, waiting a little time may put all the things in place.
If it's not your case, i have one suggestion, you can log as admin, go to "Content" -> "Policies" -> "Email".
Check one "Inbound only" policy and click "Copy".
Change the policy name.
Remove any "Conditions" and add one to the specific domain you want to bypass antispam no matter what.
Remove any "Actions" and add the "Bypass spam scanning".
Make sure it is applied to all the "Policy groups" you use.
Save it and make sure it is enabled, i would put it first against all others policies, so i would really receive it from that domain don't matter what.
Maybe there's something easier to do, but that's the way i tough i could help.
Best regards,
Carlos Oliveira
Hello, Please also check
Hello,
Please also check Administration/Users/Policy Groups, then click your policy group (probably "Default") and then click Language tab. Check if Chinese or other is selected.
Regards,
Oykun
Hi WSloan, Before anything
Hi WSloan,
Before anything else I would look at the Message Audit Logs to see what the verdicts are for these messages.
What kind of rules you have that are sending messages to quarantine?
Are we talking about Spam Quarantine or Content Incident Quarantine?
Did you change the behavior for the bad senders actions to move messages to Spam Quarantine?
Entries added on good senders or bad senders list are valid as soon as they added, you do not have to wait for them to take effect.
Thank you,
Marco Bicca
Not here
Hi Marco,
As i mentioned, i don't know if it's a Brightmail characteristic or issue, but for almost 3 years using different versions of Brightmail, after adding a good or bad sender, it never took effect immediately.
If this is not normal, i shall open a case about it.
Best regards,
Carlos Oliveira
Hi Carlos, Yes, that does not
Hi Carlos,
Yes, that does not make any sense, unless the changes are taking hours to propagate to scanners or you have some other underlying issues, they should always take effect almost immediately.
Please, do open a support case about it :-)
Thank you,
Marco Bicca
Carlos, One last note, are
Carlos,
One last note, are we talking about entries added directly by the Administrator or End User entries?
The End User entries will not be available to the product until they are sync'ed and that can take sometime.
If we are talking about Administrator entries, then those ones are available immediately.
On version 9.x and later you can configure the End User settings to sync every hour or force a sync manually, on earlier versions this was sync'ed whenever the LDAP Replication would kick in.
Thank you,
Marco Bicca
End Users
Hi Marco,
End users - but we have only one Brightmail server, there's no syncs that i know... anyway, thanks for the info, i will call Symantec !
Thanks,
Carlos Oliveira
Thank you for your help
I made changes as per Carlos' first answer. (sorry for the delay, I had to wait for messages from China, and verify with the recipients.)
The messages are no longer being held in quarrantine.
As for Carlos' problem, I agree, there should be no delay. While I am new to Brightmail 9, it is a replacement for a Brightmail 6 server. I never saw a delay when adding Good Senders on version 6.
Marco, I will look into the logs and quarrantine settings. If the messages are arleady released, will they still be referenced in the logs?
Again, thank you for your help.
Warren Sloan
Hi Warren, If messages were
Hi Warren,
If messages were being quarantined the best to do is always understand the reason, that's why I told you to troubleshoot from the Message Audit Logs, then you can reliably see which policy or policies are causing the behavior.
Anyways I am glad you were able to resolve the issue and yes, the only cases where Bad Senders and Good Senders will take a while to work is if they are End User ones otherwise they are always available immediately.
Thank you,
Marco Bicca
Would you like to reply?
Login or Register to post your comment.